A global life-sciences company stores diagnostic images (avg. object size 15 MB) generated in hospital labs around the world. Regulatory policy requires that each image remain immutable and undeleted for 10 years (WORM). After the first month, images are almost never accessed. Retrieval latencies of several hours are acceptable, and the team wants to minimize ongoing storage cost and operational effort while maintaining customer-managed encryption keys. Which Google Cloud design best satisfies the requirements?
Create a Cloud Storage bucket using the Archive storage class, set a 10-year bucket retention policy, lock the policy with Bucket Lock, and configure CMEK encryption.
Store the images as binary large objects in a Cloud SQL instance and schedule automatic backups with CMEK.
Create a Cloud Storage bucket in the Nearline storage class with Object Versioning enabled and rotate CMEK keys annually.
Provision a Filestore instance for image uploads, snapshot it daily to a Coldline Cloud Storage bucket, and delete snapshots older than 10 years.
Archive storage provides the lowest cost for rarely accessed data and tolerates retrieval latencies of several hours. A bucket-level retention policy that is subsequently locked (Bucket Lock) enforces WORM compliance for the full 10-year period, preventing overwrite or deletion. Customer-managed encryption keys (CMEK) meet the requirement for self-controlled encryption without adding significant operational overhead. The other options either cannot guarantee immutability (object versioning can still allow deletion of versions), incur much higher storage costs (Standard, Nearline, or Coldline), or rely on services that are inappropriate for large immutable objects (Relational BLOBs or Filestore snapshots).
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is WORM compliance, and why is it important for this scenario?
Open an interactive chat with Bash
How does Google Cloud's Archive Storage class achieve cost efficiency?
Open an interactive chat with Bash
What are Customer-Managed Encryption Keys (CMEK), and how do they differ from other types of encryption keys?
Open an interactive chat with Bash
What is WORM compliance in cloud storage?
Open an interactive chat with Bash
What is the Archive storage class in Google Cloud?
Open an interactive chat with Bash
How does CMEK encryption work in Google Cloud?
Open an interactive chat with Bash
GCP Professional Data Engineer
Storing the data
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .